On Tue, 2009-12-22 at 15:13 -0500, Dimitri Yioulos wrote:
> On Tuesday 22 December 2009 3:03:48 pm John Horne 
> wrote:
> > On Tue, 2009-12-22 at 14:16 -0500, Dimitri 
> Yioulos wrote:
> > > All,
> > >
> > > The best of the holiday season to all!
> > >
> > > I'm working on a side project, and have
> > > installed the latest RKH on an openSuse box. 
> > > By design, eth0 is in promiscuous mode, and
> > > RKH picks up on this.  I've edited
> > > rkhunter.conf to allow this
> > > (ALOWPROMISCIF="eth0"), then
> >
> >    ^^^^^^^^^^^^^
> >
> > This should have two 'L' in it -
> > ALLOWPROMISCIF.
> >
> >
> >
> > John.
> >
> > --
> > John Horne, University of Plymouth, UK
> > Tel: +44 (0)1752 587287    Fax: +44 (0)1752
> > 587001
> >
> 
> 
> Er, sorry John, my poorly transposed spelling.  It 
> does have 2 L's.
>
In which case I would next say look in the rkhunter log file to see if
it says anything about this. If it is detecting the whitelisted
interface then it should say so when the 'promisc' test runs.




John.

-- 
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to